admin 466f42708e controller: .fab volume legs stream via docker cp (fixes the containerized path-strand data loss, IA finding 1 HIGH) — zero shared paths both deployment shapes; export fails LOUD on any missing/empty claimed tar (no hollow bundles); import validates BEFORE it destroys (hollow bundle → app untouched); docker_run_volume_path_gate.py extinguishes the class (Tier-1/2 mounts documented host-visible) ...

Claude-Session: https://claude.ai/code/session_01GzammAMzsJTgpQHqxwM2bC

2026-07-13 10:42:02 +02:00

..

crypto.go

…

estimate.go

v0.51.0: offsite-backup UI (felhom-pbs DR) + Model-A double-nest fix

2026-06-12 20:26:52 +02:00

export.go

controller: .fab volume legs stream via docker cp (fixes the containerized path-strand data loss, IA finding 1 HIGH) — zero shared paths both deployment shapes; export fails LOUD on any missing/empty claimed tar (no hollow bundles); import validates BEFORE it destroys (hollow bundle → app untouched); docker_run_volume_path_gate.py extinguishes the class (Tier-1/2 mounts documented host-visible)

2026-07-13 10:42:02 +02:00

manifest.go

fix(CTRL-001): reject path traversal in .fab import manifest

2026-06-13 19:09:47 +02:00

provider.go

…

restore.go

controller: .fab volume legs stream via docker cp (fixes the containerized path-strand data loss, IA finding 1 HIGH) — zero shared paths both deployment shapes; export fails LOUD on any missing/empty claimed tar (no hollow bundles); import validates BEFORE it destroys (hollow bundle → app untouched); docker_run_volume_path_gate.py extinguishes the class (Tier-1/2 mounts documented host-visible)

2026-07-13 10:42:02 +02:00

roundtrip_test.go

controller: .fab volume legs stream via docker cp (fixes the containerized path-strand data loss, IA finding 1 HIGH) — zero shared paths both deployment shapes; export fails LOUD on any missing/empty claimed tar (no hollow bundles); import validates BEFORE it destroys (hollow bundle → app untouched); docker_run_volume_path_gate.py extinguishes the class (Tier-1/2 mounts documented host-visible)

2026-07-13 10:42:02 +02:00

traversal_regression_test.go

fix(CTRL-001): reject path traversal in .fab import manifest

2026-06-13 19:09:47 +02:00

validate.go

fix(CTRL-001): reject path traversal in .fab import manifest

2026-06-13 19:09:47 +02:00

volume_guard_test.go

controller: .fab volume legs stream via docker cp (fixes the containerized path-strand data loss, IA finding 1 HIGH) — zero shared paths both deployment shapes; export fails LOUD on any missing/empty claimed tar (no hollow bundles); import validates BEFORE it destroys (hollow bundle → app untouched); docker_run_volume_path_gate.py extinguishes the class (Tier-1/2 mounts documented host-visible)

2026-07-13 10:42:02 +02:00